[MEDIUM] AVideo has Unauthenticated PGP Message Decryption via Public Endpoint

PKSA-3whn-q4tm-bwhh CVE-2026-56346 GHSA-5x2w-37xf-7962

Affected package: wwbn/avideo

Affected version: <=25.0

Reported by:
GitHub